# CVEs published 2025-05-20

172 CVEs were published on May 20, 2025: 28 critical, 51 high. Days are UTC.

- [CVE-2025-5010](https://cve.now/CVE-2025-5010.md): moonlightL hexo-boot Blog Backend index.html cross site scripting (CVSS 4.8, moonlightL hexo-boot)
- [CVE-2025-5008](https://cve.now/CVE-2025-5008.md): projectworlds Online Time Table Generator add\_teacher.php sql injection (CVSS 6.9, projectworlds Online Time Table Generator)
- [CVE-2025-5007](https://cve.now/CVE-2025-5007.md): Part-DB Profile Picture Feature AttachmentSubmitHandler.php handleUpload cross site scripting (CVSS 5.1, Part-DB)
- [CVE-2025-5006](https://cve.now/CVE-2025-5006.md): Campcodes Online Shopping Portal category.php sql injection (CVSS 6.9, Campcodes Online Shopping Portal)
- [CVE-2025-5004](https://cve.now/CVE-2025-5004.md): projectworlds Online Time Table Generator add\_course.php sql injection (CVSS 6.9, projectworlds Online Time Table Generator)
- [CVE-2025-5003](https://cve.now/CVE-2025-5003.md): projectworlds Online Time Table Generator semester\_ajax.php sql injection (CVSS 6.9, projectworlds Online Time Table Generator)
- [CVE-2025-5002](https://cve.now/CVE-2025-5002.md): SourceCodester Client Database Management System user\_proposal\_update\_order.php sql injection (CVSS 6.9, SourceCodester Client Database Management System)
- [CVE-2025-5001](https://cve.now/CVE-2025-5001.md): GNU PSPP pspp-convert.c calloc integer overflow (CVSS 4.8, GNU PSPP)
- [CVE-2025-5000](https://cve.now/CVE-2025-5000.md): Linksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi control\_panel\_sw command injection (CVSS 5.3, Linksys FGW3000-AH · Linksys FGW3000-HK)
- [CVE-2025-4999](https://cve.now/CVE-2025-4999.md): Linksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi sub\_4153FC command injection (CVSS 5.3, Linksys FGW3000-AH · Linksys FGW3000-HK)
- [CVE-2025-4998](https://cve.now/CVE-2025-4998.md): H3C Magic R200G HTTP POST Request aspForm EditWlanMacList denial of service (CVSS 7.1, H3C Magic R200G)
- [CVE-2025-48056](https://cve.now/CVE-2025-48056.md): Hubble CLI vulnerable to character injection (CVSS 5.3, cilium hubble · github.com/cilium/hubble)
- [CVE-2025-4997](https://cve.now/CVE-2025-4997.md): H3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of service (CVSS 7.1, H3C R2+ProG)
- [CVE-2025-4996](https://cve.now/CVE-2025-4996.md): Intelbras RF 301K Add Static IP cross site scripting (CVSS 4.8, Intelbras RF)
- [CVE-2025-47290](https://cve.now/CVE-2025-47290.md): Containerd vulnerable to host filesystem access during image unpack (CVSS 7.6, containerd · github.com/containerd/containerd/v2)
- [CVE-2025-22157](https://cve.now/CVE-2025-22157.md): This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core (CVSS 7.2, Atlassian Jira Core Data Center · Atlassian Jira Core Se… +2)
- [CVE-2025-4364](https://cve.now/CVE-2025-4364.md): Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVSS 8.7, Assured Telematics Fleet Management System)
- [CVE-2025-47854](https://cve.now/CVE-2025-47854.md): In JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root page (CVSS 4.3, JetBrains TeamCity)
- [CVE-2025-47853](https://cve.now/CVE-2025-47853.md): In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible (CVSS 4.8, JetBrains TeamCity)
- [CVE-2025-47852](https://cve.now/CVE-2025-47852.md): In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible (CVSS 4.8, JetBrains TeamCity)
- [CVE-2025-47851](https://cve.now/CVE-2025-47851.md): In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible (CVSS 4.8, JetBrains TeamCity)
- [CVE-2025-47850](https://cve.now/CVE-2025-47850.md): In JetBrains YouTrack before 2025.1.74704 restricted attachments could become visible after issue cloning (CVSS 4.3, JetBrains YouTrack)
- [CVE-2025-48391](https://cve.now/CVE-2025-48391.md): In JetBrains YouTrack before 2025.1.76253 deletion of issues was possible due to missing permission checks in API (CVSS 7.7, JetBrains YouTrack)
- [CVE-2025-47277](https://cve.now/CVE-2025-47277.md): vLLM Allows Remote Code Execution via PyNcclPipe Communication Service (CVSS 9.8, vllm-project vllm · vllm)
- [CVE-2025-46725](https://cve.now/CVE-2025-46725.md): Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector\_store (CVSS 8.1, langroid)
- [CVE-2025-46724](https://cve.now/CVE-2025-46724.md): Langroid has a Code Injection vulnerability in TableChatAgent (CVSS 9.8, langroid)
- [CVE-2025-37991](https://cve.now/CVE-2025-37991.md): parisc: Fix double SIGFPE crash (no CVSS, Linux)
- [CVE-2025-37990](https://cve.now/CVE-2025-37990.md): wifi: brcm80211: fmac: Add error handling for brcmf\_usb\_dl\_writeimage() (no CVSS, Linux)
- [CVE-2025-37989](https://cve.now/CVE-2025-37989.md): net: phy: leds: fix memory leak (no CVSS, Linux)
- [CVE-2025-37988](https://cve.now/CVE-2025-37988.md): fix a couple of races in MNT\_TREE\_BENEATH handling by do\_move\_mount() (CVSS 7.8, Linux)
- [CVE-2025-37987](https://cve.now/CVE-2025-37987.md): pds\_core: Prevent possible adminq overflow/stuck condition (no CVSS, Linux)
- [CVE-2025-37986](https://cve.now/CVE-2025-37986.md): usb: typec: class: Invalidate USB device pointers on partner unregistration (no CVSS, Linux)
- [CVE-2025-37985](https://cve.now/CVE-2025-37985.md): USB: wdm: close race between wdm\_open and wdm\_wwan\_port\_stop (no CVSS, Linux)
- [CVE-2025-37984](https://cve.now/CVE-2025-37984.md): crypto: ecdsa - Harden against integer overflows in DIV\_ROUND\_UP() (CVSS 7.0, Linux)
- [CVE-2025-37983](https://cve.now/CVE-2025-37983.md): qibfs: fix \_another\_ leak (no CVSS, Linux)
- [CVE-2025-37982](https://cve.now/CVE-2025-37982.md): wifi: wl1251: fix memory leak in wl1251\_tx\_work (no CVSS, Linux)
- [CVE-2025-37981](https://cve.now/CVE-2025-37981.md): scsi: smartpqi: Use is\_kdump\_kernel() to check for kdump (no CVSS, Linux)
- [CVE-2025-37980](https://cve.now/CVE-2025-37980.md): block: fix resource leak in blk\_register\_queue() error path (no CVSS, Linux)
- [CVE-2025-37979](https://cve.now/CVE-2025-37979.md): ASoC: qcom: Fix sc7280 lpass potential buffer overflow (CVSS 7.8, Linux)
- [CVE-2025-37978](https://cve.now/CVE-2025-37978.md): block: integrity: Do not call set\_page\_dirty\_lock() (no CVSS, Linux)
- [CVE-2025-37977](https://cve.now/CVE-2025-37977.md): scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set (CVSS 7.8, Linux)
- [CVE-2025-37975](https://cve.now/CVE-2025-37975.md): riscv: module: Fix out-of-bounds relocation access (no CVSS, Linux)
- [CVE-2025-37974](https://cve.now/CVE-2025-37974.md): s390/pci: Fix missing check for zpci\_create\_device() error return (no CVSS, Linux)
- [CVE-2025-37973](https://cve.now/CVE-2025-37973.md): wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation (CVSS 8.1, Linux)
- [CVE-2025-37972](https://cve.now/CVE-2025-37972.md): Input: mtk-pmic-keys - fix possible null pointer dereference (no CVSS, Linux)
- [CVE-2025-37971](https://cve.now/CVE-2025-37971.md): staging: bcm2835-camera: Initialise dev in v4l2\_dev (no CVSS, Linux)
- [CVE-2025-37970](https://cve.now/CVE-2025-37970.md): iio: imu: st\_lsm6dsx: fix possible lockup in st\_lsm6dsx\_read\_fifo (no CVSS, Linux)
- [CVE-2025-37969](https://cve.now/CVE-2025-37969.md): iio: imu: st\_lsm6dsx: fix possible lockup in st\_lsm6dsx\_read\_tagged\_fifo (no CVSS, Linux)
- [CVE-2025-37968](https://cve.now/CVE-2025-37968.md): iio: light: opt3001: fix deadlock due to concurrent flag access (no CVSS, Linux)
- [CVE-2025-37967](https://cve.now/CVE-2025-37967.md): usb: typec: ucsi: displayport: Fix deadlock (no CVSS, Linux)
- [CVE-2025-37966](https://cve.now/CVE-2025-37966.md): riscv: Fix kernel crash due to PR\_SET\_TAGGED\_ADDR\_CTRL (no CVSS, Linux)
- [CVE-2025-37965](https://cve.now/CVE-2025-37965.md): drm/amd/display: Fix invalid context error in dml helper (no CVSS, Linux)
- [CVE-2025-37964](https://cve.now/CVE-2025-37964.md): x86/mm: Eliminate window where TLB flushes may be inadvertently skipped (CVSS 7.8, Linux)
- [CVE-2025-37963](https://cve.now/CVE-2025-37963.md): arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (no CVSS, Linux)
- [CVE-2025-37962](https://cve.now/CVE-2025-37962.md): ksmbd: fix memory leak in parse\_lease\_state() (no CVSS, Linux)
- [CVE-2025-37961](https://cve.now/CVE-2025-37961.md): ipvs: fix uninit-value for saddr in do\_output\_route4 (no CVSS, Linux)
- [CVE-2025-37960](https://cve.now/CVE-2025-37960.md): memblock: Accept allocated memory before use in memblock\_double\_array() (no CVSS, Linux)
- [CVE-2025-37959](https://cve.now/CVE-2025-37959.md): bpf: Scrub packet on bpf\_redirect\_peer (CVSS 9.4, Linux)
- [CVE-2025-37958](https://cve.now/CVE-2025-37958.md): mm/huge\_memory: fix dereferencing invalid pmd migration entry (no CVSS, Linux)
- [CVE-2025-37957](https://cve.now/CVE-2025-37957.md): KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (CVSS 8.8, Linux)
- [CVE-2025-37956](https://cve.now/CVE-2025-37956.md): ksmbd: prevent rename with empty string (CVSS 8.8, Linux)
- [CVE-2025-37955](https://cve.now/CVE-2025-37955.md): virtio-net: free xsk\_buffs on error in virtnet\_xsk\_pool\_enable() (no CVSS, Linux)
- [CVE-2025-37954](https://cve.now/CVE-2025-37954.md): smb: client: Avoid race in open\_cached\_dir with lease breaks (CVSS 7.5, Linux)
- [CVE-2025-37953](https://cve.now/CVE-2025-37953.md): sch\_htb: make htb\_deactivate() idempotent (no CVSS, Linux)
- [CVE-2025-37952](https://cve.now/CVE-2025-37952.md): ksmbd: Fix UAF in \_\_close\_file\_table\_ids (CVSS 8.8, Linux)
- [CVE-2025-37951](https://cve.now/CVE-2025-37951.md): drm/v3d: Add job to pending list if the reset was skipped (no CVSS, Linux)
- [CVE-2025-37950](https://cve.now/CVE-2025-37950.md): ocfs2: fix panic in failed foilio allocation (no CVSS, Linux)
- [CVE-2025-37949](https://cve.now/CVE-2025-37949.md): xenbus: Use kref to track req lifetime (CVSS 7.8, Linux)
- [CVE-2025-37948](https://cve.now/CVE-2025-37948.md): arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (no CVSS, Linux)
- [CVE-2025-37947](https://cve.now/CVE-2025-37947.md): ksmbd: prevent out-of-bounds stream writes by validating \*pos (CVSS 8.8, Linux)
- [CVE-2025-37946](https://cve.now/CVE-2025-37946.md): s390/pci: Fix duplicate pci\_dev\_put() in disable\_slot() when PF has child VFs (no CVSS, Linux)
- [CVE-2025-37945](https://cve.now/CVE-2025-37945.md): net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (no CVSS, Linux)
- [CVE-2025-37944](https://cve.now/CVE-2025-37944.md): wifi: ath12k: Fix invalid entry fetch in ath12k\_dp\_mon\_srng\_process (CVSS 8.8, Linux)
- [CVE-2025-37943](https://cve.now/CVE-2025-37943.md): wifi: ath12k: Fix invalid data access in ath12k\_dp\_rx\_h\_undecap\_nwifi (CVSS 8.8, Linux)
- [CVE-2025-37941](https://cve.now/CVE-2025-37941.md): ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x\_soc\_codec\_probe() (no CVSS, Linux)
- [CVE-2025-37940](https://cve.now/CVE-2025-37940.md): ftrace: Add cond\_resched() to ftrace\_graph\_set\_hash() (no CVSS, Linux)
- [CVE-2025-37939](https://cve.now/CVE-2025-37939.md): libbpf: Fix accessing BTF.ext core\_relo header (no CVSS, Linux)
- [CVE-2025-37938](https://cve.now/CVE-2025-37938.md): tracing: Verify event formats that have "%\*p.." (CVSS 7.1, Linux)
- [CVE-2025-37937](https://cve.now/CVE-2025-37937.md): objtool, media: dib8000: Prevent divide-by-zero in dib8000\_set\_dds() (no CVSS, Linux)
- [CVE-2024-45641](https://cve.now/CVE-2024-45641.md): IBM Security ReaQta improper certificate validation (CVSS 6.5, IBM Security ReaQta EDR)
- [CVE-2025-37936](https://cve.now/CVE-2025-37936.md): perf/x86/intel: KVM: Mask PEBS\_ENABLE loaded for guest with vCPU's value. (CVSS 8.7, Linux)
- [CVE-2025-37935](https://cve.now/CVE-2025-37935.md): net: ethernet: mtk\_eth\_soc: fix SER panic with 4GB+ RAM (CVSS 9.8, Linux)
- [CVE-2025-37934](https://cve.now/CVE-2025-37934.md): ASoC: simple-card-utils: Fix pointer check in graph\_util\_parse\_link\_direction (no CVSS, Linux)
- [CVE-2025-37933](https://cve.now/CVE-2025-37933.md): octeon\_ep: Fix host hang issue during device reboot (no CVSS, Linux)
- [CVE-2025-37932](https://cve.now/CVE-2025-37932.md): sch\_htb: make htb\_qlen\_notify() idempotent (no CVSS, Linux)
- [CVE-2025-37931](https://cve.now/CVE-2025-37931.md): btrfs: adjust subpage bit start based on sectorsize (CVSS 7.3, Linux)
- [CVE-2025-37930](https://cve.now/CVE-2025-37930.md): drm/nouveau: Fix WARN\_ON in nouveau\_fence\_context\_kill() (no CVSS, Linux)
- [CVE-2025-37929](https://cve.now/CVE-2025-37929.md): arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (no CVSS, Linux)
- [CVE-2025-37928](https://cve.now/CVE-2025-37928.md): dm-bufio: don't schedule in atomic context (no CVSS, Linux)
- [CVE-2025-37927](https://cve.now/CVE-2025-37927.md): iommu/amd: Fix potential buffer overflow in parse\_ivrs\_acpihid (no CVSS, Linux)
- [CVE-2025-37926](https://cve.now/CVE-2025-37926.md): ksmbd: fix use-after-free in ksmbd\_session\_rpc\_open (CVSS 8.8, Linux)
- [CVE-2025-37924](https://cve.now/CVE-2025-37924.md): ksmbd: fix use-after-free in kerberos authentication (CVSS 9.8, Linux)
- [CVE-2025-37923](https://cve.now/CVE-2025-37923.md): tracing: Fix oob write in trace\_seq\_to\_buffer() (CVSS 7.8, Linux)
- [CVE-2025-37922](https://cve.now/CVE-2025-37922.md): book3s64/radix : Align section vmemmap start address to PAGE\_SIZE (no CVSS, Linux)
- [CVE-2025-37921](https://cve.now/CVE-2025-37921.md): vxlan: vnifilter: Fix unlocked deletion of default FDB entry (CVSS 7.8, Linux)
- [CVE-2025-37920](https://cve.now/CVE-2025-37920.md): xsk: Fix race condition in AF\_XDP generic RX path (CVSS 7.8, Linux)
- [CVE-2025-37919](https://cve.now/CVE-2025-37919.md): ASoC: amd: acp: Fix NULL pointer deref in acp\_i2s\_set\_tdm\_slot (no CVSS, Linux)
- [CVE-2025-37918](https://cve.now/CVE-2025-37918.md): Bluetooth: btusb: avoid NULL pointer dereference in skb\_dequeue() (CVSS 8.8, Linux)
- [CVE-2025-37917](https://cve.now/CVE-2025-37917.md): net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (CVSS 7.5, Linux)
- [CVE-2025-37916](https://cve.now/CVE-2025-37916.md): pds\_core: remove write-after-free of client\_id (no CVSS, Linux)
- [CVE-2025-37915](https://cve.now/CVE-2025-37915.md): net\_sched: drr: Fix double list add in class with netem as child qdisc (CVSS 7.8, Linux)
- [CVE-2025-37914](https://cve.now/CVE-2025-37914.md): net\_sched: ets: Fix double list add in class with netem as child qdisc (CVSS 7.8, Linux)
- [CVE-2025-37913](https://cve.now/CVE-2025-37913.md): net\_sched: qfq: Fix double list add in class with netem as child qdisc (CVSS 7.8, Linux)
- [CVE-2025-37912](https://cve.now/CVE-2025-37912.md): ice: Check VF VSI Pointer Value in ice\_vc\_add\_fdir\_fltr() (no CVSS, Linux)
- [CVE-2025-37911](https://cve.now/CVE-2025-37911.md): bnxt\_en: Fix out-of-bound memcpy() during ethtool -w (CVSS 7.8, Linux)
- [CVE-2025-37910](https://cve.now/CVE-2025-37910.md): ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations (no CVSS, Linux)
- [CVE-2025-37909](https://cve.now/CVE-2025-37909.md): net: lan743x: Fix memleak issue when GSO enabled (no CVSS, Linux)
- [CVE-2025-37908](https://cve.now/CVE-2025-37908.md): mm, slab: clean up slab-\>obj\_exts always (CVSS 7.8, Linux)
- [CVE-2025-37907](https://cve.now/CVE-2025-37907.md): accel/ivpu: Fix locking order in ivpu\_job\_submit (no CVSS, Linux)
- [CVE-2025-37906](https://cve.now/CVE-2025-37906.md): ublk: fix race between io\_uring\_cmd\_complete\_in\_task and ublk\_cancel\_cmd (CVSS 7.8, Linux)
- [CVE-2025-37905](https://cve.now/CVE-2025-37905.md): firmware: arm\_scmi: Balance device refcount when destroying devices (no CVSS, Linux)
- [CVE-2025-37904](https://cve.now/CVE-2025-37904.md): btrfs: fix the inode leak in btrfs\_iget() (no CVSS, Linux)
- [CVE-2025-37903](https://cve.now/CVE-2025-37903.md): drm/amd/display: Fix slab-use-after-free in hdcp (CVSS 7.8, Linux)
- [CVE-2025-37901](https://cve.now/CVE-2025-37901.md): irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs (CVSS 7.8, Linux)
- [CVE-2025-37900](https://cve.now/CVE-2025-37900.md): iommu: Fix two issues in iommu\_copy\_struct\_from\_user() (no CVSS, Linux)
- [CVE-2025-37899](https://cve.now/CVE-2025-37899.md): ksmbd: fix use-after-free in session logoff (CVSS 8.8, Linux)
- [CVE-2025-37898](https://cve.now/CVE-2025-37898.md): powerpc64/ftrace: fix module loading without patchable function entries (no CVSS, Linux)
- [CVE-2025-37897](https://cve.now/CVE-2025-37897.md): wifi: plfxlc: Remove erroneous assert in plfxlc\_mac\_release (no CVSS, Linux)
- [CVE-2025-37896](https://cve.now/CVE-2025-37896.md): spi: spi-mem: Add fix to avoid divide error (no CVSS, Linux)
- [CVE-2025-37895](https://cve.now/CVE-2025-37895.md): bnxt\_en: Fix error handling path in bnxt\_init\_chip() (no CVSS, Linux)
- [CVE-2025-37894](https://cve.now/CVE-2025-37894.md): net: use sock\_gen\_put() when sk\_state is TCP\_TIME\_WAIT (CVSS 9.8, Linux)
- [CVE-2025-48018](https://cve.now/CVE-2025-48018.md): Deserialization of Untrusted Data (CVSS 7.5, Schweitzer Engineering Laboratories SEL-5030 acSELerator Qu…)
- [CVE-2025-48017](https://cve.now/CVE-2025-48017.md): Improper Limitation of a Pathname to a Restricted Directory (CVSS 9.0, Schweitzer Engineering Laboratories SEL-5056 Software-Defin…)
- [CVE-2025-48016](https://cve.now/CVE-2025-48016.md): Improper Control of Interaction Frequency (CVSS 4.3, Schweitzer Engineering Laboratories SEL-5056 Software-Defin…)
- [CVE-2025-48015](https://cve.now/CVE-2025-48015.md): Observable Response Discrepancy (CVSS 3.7, Schweitzer Engineering Laboratories SEL-5056 Software-Defin…)
- [CVE-2025-48014](https://cve.now/CVE-2025-48014.md): Improper Restriction of Excessive Authentication Attempts (CVSS 7.5, Schweitzer Engineering Laboratories SEL-5056 Software-Defin…)
- [CVE-2023-33861](https://cve.now/CVE-2023-33861.md): IBM Security ReaQta improper certificate validation (CVSS 6.5, IBM Security ReaQta EDR)
- [CVE-2025-41228](https://cve.now/CVE-2025-41228.md): VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability (CVSS 4.3, VMware vCenter Server · VMware Cloud Foundation +3)
- [CVE-2025-41227](https://cve.now/CVE-2025-41227.md): Denial-of-Service Vulnerability (CVSS 5.5, VMware ESXi · VMware Cloud Foundation +4)
- [CVE-2025-41226](https://cve.now/CVE-2025-41226.md): Guest Operations Denial-of-Service Vulnerability (CVSS 6.8, VMware ESXi · VMware Cloud Foundation +2)
- [CVE-2025-41225](https://cve.now/CVE-2025-41225.md): VMware vCenter Server authenticated command-execution vulnerability (CVSS 8.8, VMware vCenter Server · VMware Cloud Foundation +2)
- [CVE-2025-47941](https://cve.now/CVE-2025-47941.md): TYPO3 Has Broken Authentication in Backend MFA (CVSS 7.2, typo3 · typo3/cms-backend)
- [CVE-2025-47940](https://cve.now/CVE-2025-47940.md): TYPO3 CMS Vulnerable to Privilege Escalation to System Maintainer (CVSS 7.2, typo3 · typo3/cms-core)
- [CVE-2025-47939](https://cve.now/CVE-2025-47939.md): TYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction Layer (CVSS 5.4, typo3 · typo3/cms-core)
- [CVE-2025-4980](https://cve.now/CVE-2025-4980.md): Netgear DGND3700 mini\_http currentsetting.htm information disclosure (CVSS 6.9, Netgear DGND3700)
- [CVE-2025-47938](https://cve.now/CVE-2025-47938.md): TYPO3 Vulnerable to Unverified Password Change for Backend Users (CVSS 3.8, typo3 · typo3/cms-core +1)
- [CVE-2025-47937](https://cve.now/CVE-2025-47937.md): TYPO3 Vulnerable to Information Disclosure via DBAL Restriction Handling (CVSS 3.7, typo3 · typo3/cms-core)
- [CVE-2025-47936](https://cve.now/CVE-2025-47936.md): TYPO3 Vulnerable to Server Side Request Forgery via Webhooks (CVSS 3.3, typo3 · typo3/cms-webhooks)
- [CVE-2025-4978](https://cve.now/CVE-2025-4978.md): Netgear DGND3700 Basic Authentication BRS\_top.html improper authentication (CVSS 9.3, Netgear DGND3700)
- [CVE-2025-4977](https://cve.now/CVE-2025-4977.md): Netgear DGND3700 BRS\_top.html information disclosure (CVSS 6.9, Netgear DGND3700)
- [CVE-2025-41231](https://cve.now/CVE-2025-41231.md): VMware Cloud Foundation Missing Authorisation Vulnerability (CVSS 7.3, VMware Cloud Foundation)
- [CVE-2025-41230](https://cve.now/CVE-2025-41230.md): VMware Cloud Foundation Information Disclosure Vulnerability (CVSS 7.5, VMware Cloud Foundation)
- [CVE-2025-41229](https://cve.now/CVE-2025-41229.md): VMware Cloud Foundation Directory Traversal Vulnerability (CVSS 8.2, VMware Cloud Foundation)
- [CVE-2025-40635](https://cve.now/CVE-2025-40635.md): SQL injection at Comerzzia (CVSS 9.3, Comerzzia Backoffice: Sales Orchestrator)
- [CVE-2025-30193](https://cve.now/CVE-2025-30193.md): Denial of service via crafted TCP exchange (CVSS 7.5, PowerDNS DNSdist)
- [CVE-2025-37892](https://cve.now/CVE-2025-37892.md): mtd: inftlcore: Add error check for inftl\_read\_oob() (no CVSS, Linux)
- [CVE-2025-40633](https://cve.now/CVE-2025-40633.md): Stored Cross-Site Scripting (XSS) in Koibox (CVSS 5.1, Koibox)
- [CVE-2025-40634](https://cve.now/CVE-2025-40634.md): Stack-based buffer overflow in TP-Link Archer AX50 (CVSS 9.2, TP-Link Link Archer AX50)
- [CVE-2025-4951](https://cve.now/CVE-2025-4951.md): Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field (CVSS 4.6, Rapid7 AppSpider Pro)
- [CVE-2024-5878](https://cve.now/CVE-2024-5878.md): Multiple Plugins \<= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library (CVSS 6.4, aknieriem Simplelightbox · smub Photo Gallery, Sliders, Pro…)
- [CVE-2025-2929](https://cve.now/CVE-2025-2929.md): Order Delivery Date Pro for WooCommerce \< 12.4.0 - Reflected XSS (CVSS 7.1, Order Delivery Date)
- [CVE-2025-4322](https://cve.now/CVE-2025-4322.md): Motors \<= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover (CVSS 9.8, StylemixThemes Motors - Car Dealer, Rental & Listing WordPr…)
- [CVE-2024-53359](https://cve.now/CVE-2024-53359.md): An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request. (CVSS 7.5)
- [CVE-2025-26086](https://cve.now/CVE-2025-26086.md): An unauthenticated blind SQL injection vulnerability exists in RSI Queue Management System v3.0 within the TaskID parameter of the get reque (CVSS 7.5)
- [CVE-2025-44084](https://cve.now/CVE-2025-44084.md): D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. (CVSS 9.8)
- [CVE-2025-44880](https://cve.now/CVE-2025-44880.md): A command injection vulnerability in the component /cgi-bin/adm.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary command (CVSS 9.8)
- [CVE-2025-44881](https://cve.now/CVE-2025-44881.md): A command injection vulnerability in the component /cgi-bin/qos.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary command (CVSS 9.8)
- [CVE-2025-44882](https://cve.now/CVE-2025-44882.md): A command injection vulnerability in the component /cgi-bin/firewall.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary co (CVSS 9.8)
- [CVE-2025-44883](https://cve.now/CVE-2025-44883.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the tacIp parameter in the web\_tacplus\_serverEdit\_post function. (CVSS 9.8)
- [CVE-2025-44884](https://cve.now/CVE-2025-44884.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the web\_sys\_infoContact\_post function. (CVSS 9.8)
- [CVE-2025-44885](https://cve.now/CVE-2025-44885.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the remote\_ip parameter in the web\_snmpv3\_remote\_engineId\_add\_pos (CVSS 9.8)
- [CVE-2025-44886](https://cve.now/CVE-2025-44886.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the byruleEditName parameter in the web\_acl\_mgmt\_Rules\_Edit\_postc (CVSS 9.8)
- [CVE-2025-44887](https://cve.now/CVE-2025-44887.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radIpkey parameter in the web\_radiusSrv\_post function. (CVSS 9.8)
- [CVE-2025-44888](https://cve.now/CVE-2025-44888.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the stp\_conf\_name parameter in the web\_stp\_globalSetting\_post fun (CVSS 9.8)
- [CVE-2025-44890](https://cve.now/CVE-2025-44890.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host\_ip parameter in the web\_snmp\_notifyv3\_add\_post function. (CVSS 9.8)
- [CVE-2025-44891](https://cve.now/CVE-2025-44891.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host\_ip parameter in the web\_snmp\_v3host\_add\_post function. (CVSS 9.8)
- [CVE-2025-44893](https://cve.now/CVE-2025-44893.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ruleNamekey parameter in the web\_acl\_mgmt\_Rules\_Apply\_post fu (CVSS 9.8)
- [CVE-2025-44894](https://cve.now/CVE-2025-44894.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radDftParamKey parameter in the web\_radiusSrv\_dftParam\_post f (CVSS 9.8)
- [CVE-2025-44896](https://cve.now/CVE-2025-44896.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bindEditMACName parameter in the web\_acl\_bindEdit\_post functi (CVSS 9.8)
- [CVE-2025-44897](https://cve.now/CVE-2025-44897.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bytftp\_srvip parameter in the web\_tool\_upgradeManager\_post fu (CVSS 9.8)
- [CVE-2025-44898](https://cve.now/CVE-2025-44898.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the web\_aaa\_loginAuthlistEdit functi (CVSS 9.8)
- [CVE-2025-45862](https://cve.now/CVE-2025-45862.md): TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the interfacenameds parameter in the formDhcpv6s inter (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-05-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.